Skip to content

Commit

Permalink
Fix workflow
Browse files Browse the repository at this point in the history
  • Loading branch information
wkobiela committed Jan 29, 2024
1 parent dda4b63 commit 644167c
Showing 1 changed file with 9 additions and 10 deletions.
19 changes: 9 additions & 10 deletions .github/workflows/bandit.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -21,9 +21,9 @@ on:
jobs:
bandit:
permissions:
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
contents: read # for actions/checkout to fetch code
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status

runs-on: ubuntu-latest
steps:
Expand All @@ -33,9 +33,8 @@ jobs:
fetch-depth: 0

- name: Install dependencies
shell: bash
run: |
pip install bandit bandit-sarif-formatter
run: |
pip install bandit bandit-sarif-formatter
- name: Run Bandit scan
shell: bash
Expand Down Expand Up @@ -107,10 +106,10 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

- name: Upload artifact
uses: actions/upload-artifact@v4
with:
name: results.sarif
path: results.sarif
uses: actions/upload-artifact@v4
with:
name: results.sarif
path: results.sarif

- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v3
Expand Down

0 comments on commit 644167c

Please sign in to comment.